General

  • Target

    pengisv.rar

  • Size

    12.4MB

  • MD5

    91a10fd29a37a533b53bd251514b88b2

  • SHA1

    c1ae76d63ce8b8821aae8d7d07789e66f8852d4a

  • SHA256

    1acb77a48fd420725c250b00ba9ed65ede6220c52db07f0226a23071eea0970c

  • SHA512

    ab6ecedfb876fca2b0167a6d9c317474325fc029980ebb688eabd14fbd3d672ea51ae03c9f60fea5c2910e3a519d588319213ba712e52134714c92890c58706c

  • SSDEEP

    98304:ChmFLATcWWsar1ZyZDUP9Itc0/MMBIXdXs2jLReShgd5:GFWswyZAP/bmIXdXpZV+d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • pengisv.rar
    .rar

    Password: peng

  • pengisv/Fix.exe
    .exe windows:4 windows x86 arch:x86

    Password: peng

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Cellular
  • $INTERNET_CACHE/Chase
  • $INTERNET_CACHE/Chest
  • $INTERNET_CACHE/Col
  • $INTERNET_CACHE/Conditions
  • $INTERNET_CACHE/Device
  • $INTERNET_CACHE/Eco
  • $INTERNET_CACHE/Encountered
  • $INTERNET_CACHE/Firewall
  • $INTERNET_CACHE/Green
  • $INTERNET_CACHE/Insects
  • $INTERNET_CACHE/Install
  • $INTERNET_CACHE/Locate
  • $INTERNET_CACHE/Permit
  • $INTERNET_CACHE/Photographers
  • $INTERNET_CACHE/Qualification
  • $INTERNET_CACHE/Teen
  • pengisv/FixV2.exe
    .exe windows:4 windows x86 arch:x86

    Password: peng

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • pengisv/Injector.exe
    .exe windows:4 windows x86 arch:x86

    Password: peng

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Applicable
  • $INTERNET_CACHE/Commentary
  • $INTERNET_CACHE/Courses
  • $INTERNET_CACHE/Decades
  • $INTERNET_CACHE/Eur
  • $INTERNET_CACHE/Flags
  • $INTERNET_CACHE/Holidays
  • $INTERNET_CACHE/Ima
  • $INTERNET_CACHE/Material
  • $INTERNET_CACHE/Originally
  • $INTERNET_CACHE/Postage
  • $INTERNET_CACHE/Pulling
  • $INTERNET_CACHE/Refine
  • $INTERNET_CACHE/Report
  • $INTERNET_CACHE/Tender
  • $INTERNET_CACHE/Therapeutic
  • $INTERNET_CACHE/This
  • $INTERNET_CACHE/Twiki
  • pengisv/bocchisr.dll
    .dll windows:6 windows x64 arch:x64

    Password: peng

    e982d37248e110824dc396e93f562a9e


    Headers

    Imports

    Sections

  • pengisv/ced3d9hook64.dll
    .dll windows:5 windows x64 arch:x64

    Password: peng

    4b9b84d7aa5c3523fdc75de4312d466e


    Code Sign

    Headers

    Imports

    Exports

    Sections